test[.]casino-kraken[.]com

Analysis indicates that the domain test.casino-kraken.com was registered on February 21, 2026 through GMO Internet Group, Inc. d/b/a Onamae.com and is currently active. The authoritative nameservers are ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended-domain.com, suggesting a hold or suspension status. DNS resolves to 104.21.69.177, an address owned by Cloudflare, Inc. (AS13335) located in the United States. HTTP requests return a 403 status and no TLS certificate is presented, confirming the site is served over plain HTTP. The page title reported by the scanner is identical to the domain name, providing no additional context. The infrastructure is associated with a known “Gambler Scam” phishing kit and is classified as a cryptocurrency‑related brand impersonation targeting Kraken. The Gridinsoft trust score is 0/100, and the domain appears on three security blocklists. It has been flagged by multiple blocklist providers, including PhishDestroy, MetaMask, and SEAL. The risk rating is high and the status remains active. Defenders should block the domain at network perimeter and DNS layers, enforce TLS inspection to detect the lack of encryption, and add the associated IP address to threat‑intel feeds. Continuous monitoring of the nameserver patterns and any changes to the HTTP response is advised. Because the content has not been publicly analysed, further investigation of the landing page is recommended to confirm the phishing payload and to identify any additional command‑and‑control infrastructure.